Trying to injection below script in a binary named yolo.exe to get the address of the function lol but unable to get any output.
js = """
// Maximum payload size
var size = 2000;
// Argument for the fuzzed function
var arg = Memory.alloc(size);
var fuzzData = [0x41];
var lolAddr = null;
var lolHandle = null;
// Find the vulnerable function in the target process
// and get a handle to it
Module.enumerateSymbolsSync("yolo").forEach(function(symbol){
switch (symbol.name) {
case "lol":
lolAddr = symbol.address;
// use the function prototype to create a handle
lolHandle = new NativeFunction(ptr(lolAddr), "void", ["pointer"]);
console.log("[i] lol() is at " + lolAddr);
}
});
"""
Trying to injection below script in a binary named yolo.exe to get the address of the function lol but unable to get any output.
js = """ // Maximum payload size var size = 2000;
// Argument for the fuzzed function var arg = Memory.alloc(size); var fuzzData = [0x41]; var lolAddr = null; var lolHandle = null;
// Find the vulnerable function in the target process // and get a handle to it Module.enumerateSymbolsSync("yolo").forEach(function(symbol){ switch (symbol.name) { case "lol": lolAddr = symbol.address; // use the function prototype to create a handle lolHandle = new NativeFunction(ptr(lolAddr), "void", ["pointer"]); console.log("[i] lol() is at " + lolAddr); } }); """